Privacy Policy

Last updated: 1 November 2026

Who is responsible

Easy-Stack is the controller of personal data processed to run this store and fulfil your orders. Privacy contact: julian@easy-stack.com. Website: easy-stack.com.

Information we process

We process information you provide when ordering or contacting us, including your name, email address, billing and delivery addresses, telephone number, order contents, payment status, return requests and correspondence. If customer accounts are offered, we process the information necessary to manage those accounts.

Our store also processes technical information such as IP address, browser and device information, security logs, cart information and cookie preferences. Optional analytics and advertising information is processed only where the relevant feature is enabled and the required legal basis or consent is in place. Payment providers process the payment credentials needed for your selected method; do not send payment card details by email.

Why we use information and our legal bases

We use order, delivery, payment-status and support information to take steps at your request and perform our contract with you. We use necessary invoice and accounting information to meet legal obligations. We process proportionate security and fraud-prevention information on the basis of our legitimate interests in protecting customers and the store, balancing those interests against your rights.

Where consent is required for marketing messages, advertising tracking or optional cookies, we rely on your consent. Withdrawing consent does not affect earlier lawful processing. Any marketing to existing customers without fresh consent is limited to what the applicable rules permit, with a simple way to object. Order confirmations, delivery messages and service notices are not optional marketing messages.

Who receives information

We share relevant information with Shopify, which hosts the store; payment providers; delivery and fulfilment providers; and service providers supporting our administration and customer service. We disclose information to authorities where legally required. Providers receive information appropriate to their role. Some providers act as processors for us; others act as independent controllers for their own regulated or specified purposes.

We advertise through TikTok. With your consent, the TikTok pixel receives information about your visit and actions on our store (such as viewing products, adding to cart and purchasing) to measure and improve our advertising; see https://www.tiktok.com/legal/privacy-policy. If a supplier dispatches an order directly, the necessary delivery information is shared with that supplier.

Shopify

Shopify processes information to provide the store platform and checkout. Depending on the services enabled and how you interact with Shopify, Shopify may also process information for purposes for which it is independently responsible. Details are available at https://www.shopify.com/legal/privacy/consumers and https://privacy.shopify.com/.

International processing

Shopify and other providers may process information outside the European Economic Area. Where required, transfers are protected by a recognised adequacy decision, approved contractual safeguards or another lawful transfer mechanism. Contact us for information about the safeguards relevant to your data and how to obtain a copy.

How long we keep information

We keep information only for as long as necessary for its stated purpose or a legal requirement. Basic Dutch accounting records are generally retained for seven years, while records subject to OSS or IOSS rules may require ten years. This does not mean we keep every customer interaction for that period.

Customer support correspondence is kept as long as needed to handle your question and any follow-up. Customer account data is kept while your account is active. Security logs, analytics and advertising data are kept for the periods set by the providers concerned. Consent records and a minimal suppression record may be retained where needed to demonstrate consent or respect an unsubscribe request. An active dispute may require relevant records to be kept until it is resolved.

Your rights

Subject to the applicable legal conditions, you can request access, correction, deletion, restriction or portability of your personal data. You can object to processing based on legitimate interests and object to direct marketing at any time. You can withdraw consent at any time. Email julian@easy-stack.com to make a request. We may ask for proportionate information to verify your identity. We normally respond within one month; where the law allows an extension, we will explain it within that initial period.

You may complain to the Dutch Autoriteit Persoonsgegevens at https://autoriteitpersoonsgegevens.nl/ or to the competent supervisory authority in your country. Contacting us first is optional.

Cookies, marketing and automated decisions

Our Cookie Policy explains tracking technologies and how to control your choices. Newsletter messages include an unsubscribe option. We do not make solely automated decisions with legal or similarly significant effects.

Security and required information

We use appropriate technical and organisational safeguards for the personal data we process. No system can guarantee absolute security. Information necessary for payment and delivery must be provided for us to complete an order; optional information is identified as optional. We do not need sensitive personal information for an ordinary bracelet order.

Updates

We update this notice when our practices change and explain material changes where legally required. The current version and date are available on this page.